{"id":13575903,"url":"https://github.com/pen4uin/java-memshell-generator","last_synced_at":"2025-05-14T14:08:14.509Z","repository":{"id":172344458,"uuid":"649105586","full_name":"pen4uin/java-memshell-generator","owner":"pen4uin","description":"一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.","archived":false,"fork":false,"pushed_at":"2025-01-12T12:33:17.000Z","size":13078,"stargazers_count":1848,"open_issues_count":5,"forks_count":208,"subscribers_count":20,"default_branch":"main","last_synced_at":"2025-04-11T23:56:18.688Z","etag":null,"topics":["java","memshell","payload","real-world","webshell"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/pen4uin.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-06-03T19:49:29.000Z","updated_at":"2025-04-11T18:13:00.000Z","dependencies_parsed_at":"2023-09-04T08:57:42.137Z","dependency_job_id":"4aef94f5-ad0c-490d-a931-e7312ae9d7f5","html_url":"https://github.com/pen4uin/java-memshell-generator","commit_stats":{"total_commits":53,"total_committers":1,"mean_commits":53.0,"dds":0.0,"last_synced_commit":"aa24fd137c58e7fc57b530df5411a568f49e11d7"},"previous_names":["pen4uin/jmemshellgenerator","pen4uin/java-memshell-generator","pen4uin/java-memshell-generator-release"],"tags_count":9,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pen4uin%2Fjava-memshell-generator","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pen4uin%2Fjava-memshell-generator/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pen4uin%2Fjava-memshell-generator/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pen4uin%2Fjava-memshell-generator/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/pen4uin","download_url":"https://codeload.github.com/pen4uin/java-memshell-generator/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254159691,"owners_count":22024564,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["java","memshell","payload","real-world","webshell"],"created_at":"2024-08-01T15:01:05.258Z","updated_at":"2025-05-14T14:08:14.488Z","avatar_url":"https://github.com/pen4uin.png","language":"Java","readme":"\u003ch4 align=\"right\"\u003e\u003cstrong\u003e\u003ca href=\"jmg-docs/README_EN.md\"\u003eEnglish\u003c/a\u003e\u003c/strong\u003e | 中文 \u003c/h4\u003e\n\u003cp align=\"center\"\u003e\n  \u003ch1 align=\"center\"\u003eJava Memshell Generator\u003c/h1\u003e\n  \u003cdiv align=\"center\"\u003e\n    \u003cimg alt=\"GitHub watchers\" src=\"https://img.shields.io/github/watchers/pen4uin/java-memshell-generator?style=flat-square\"\u003e\n    \u003cimg alt=\"GitHub forks\" src=\"https://img.shields.io/github/forks/pen4uin/java-memshell-generator?style=flat-square\"\u003e\n    \u003cimg alt=\"GitLab Stars\" src=\"https://img.shields.io/github/stars/pen4uin/java-memshell-generator.svg?style=flat-square\"\u003e\n  \u003c/div\u003e\n  \u003cdiv align=\"center\"\u003e一款支持高度自定义的 Java 内存马生成工具\u003c/div\u003e\n\u003c/p\u003e\n\n\u003cimg src=\"./jmg-docs/img/gui_250101.png\" width=\"900px\" /\u003e\n\n\u003cbr\u003e\n\n\u003e [!WARNING]\n\u003e 本工具仅供安全研究和学习使用。使用者需自行承担因使用此工具产生的所有法律及相关责任。请确保你的行为符合当地的法律和规定。作者不承担任何责任。如不接受，请勿使用此工具。\n\n\u003cbr\u003e\n\n## 功能\n\n| 中间件             | 框架          | 工具 (测试版本)                                              | 内存马类型    | 输出格式   | 辅助模块       |\n| ------------------ | ------------- | ------------------------------------------------------------ | ------------- | ---------- | -------------- |\n| Tomcat             | SpringMVC     | [AntSword](https://github.com/AntSwordProject/antSword) (2.1.15) | Listener      | BASE64     | 专项漏洞封装   |\n| Resin              | SpringWebFlux | [Behinder](https://github.com/rebeyond/Behinder) (4.0.7)     | Filter        | BCEL       | 表达式语句封装 |\n| WebLogic           |               | [Godzilla](https://github.com/BeichenDream/Godzilla) (4.0.1) | Interceptor   | BIGINTEGER |                |\n| Jetty              |               | [Neo-reGeorg](https://github.com/L-codes/Neo-reGeorg) (5.1.0) | HandlerMethod | CLASS      |                |\n| WebSphere          |               | [Suo5](https://github.com/zema1/suo5) (0.9.0)                | TomcatValve   | JAR        |                |\n| Undertow           |               | Custom                                                       |               | JAR_AGENT  |                |\n| GlassFish          |               |                                                              |               | JS         |                |\n| Apusic（金蝶）     |               |                                                              |               | JSP        |                |\n| BES（宝兰德）      |               |                                                              |               |            |                |\n| InforSuite（中创） |               |                                                              |               |            |                |\n| TongWeb（东方通）  |               |                                                              |               |            |                |\n|                    |               |                                                              |               |            |                |\n\n## 编译\n\nmaven (v3.9.3)\n\n```shell\nmvn package assembly:single\n```\n\n## 使用\n\n**图形化**\n\n```shell\njava -jar ./releases/jmg-gui-1.0.9.jar\n```\n\n**命令行**\n\n```shell\njava -jar ./releases/jmg-cli-1.0.9.jar\n```\n\n**Woodpecker 插件**\n\n将 jmg-woodpecker-1.0.9.jar 添加到 woodpecker 插件目录\n\n\n**第三方库 (Maven)**\n\n1.将 jmg-sdk-1.0.9.jar 安装到本地 maven 仓库\n\n```shell\nmvn install:install-file -Dfile=./releases/jmg-sdk-1.0.9.jar -DgroupId=jmg -DartifactId=jmg-sdk -Dversion=1.0.9 -Dpackaging=jar\n```\n\n2.添加为依赖\n\n```xml\n\u003cdependency\u003e\n    \u003cgroupId\u003ejmg\u003c/groupId\u003e\n    \u003cartifactId\u003ejmg-sdk\u003c/artifactId\u003e\n    \u003cversion\u003e1.0.9\u003c/version\u003e\n\u003c/dependency\u003e\n```\n\n3.示例\n\n```\n// 基础配置\nAbstractConfig config = new AbstractConfig() {{\n    // 设置工具类型\n    setToolType(Constants.TOOL_GODZILLA);\n    // 设置中间件 or 框架\n    setServerType(Constants.SERVER_TOMCAT);\n    // 设置内存马类型\n    setShellType(Constants.SHELL_LISTENER);\n    // 设置输出格式为 BASE64\n    setOutputFormat(Constants.FORMAT_BASE64);\n    // 设置漏洞利用封装，默认不启用\n    setGadgetType(Constants.GADGET_NONE);\n    // 初始化基础配置\n    build();\n}};\n\njMGenerator generator = new jMGenerator(config);\ngenerator.genPayload();\ngenerator.printPayload();\n\n// 连接信息\nSDKResultUtil.printBasicInfo(config);\nSDKResultUtil.printDebugInfo(config);\n```\n\n## 文档\n\n- [jMG v1.0.8](./jmg-docs/1.0.8/)\n- [jMG v1.0.6](./jmg-docs/1.0.6/)\n- [jMG v1.0.5](./jmg-docs/1.0.5/)\n- [jMG v1.0.4](./jmg-docs/1.0.4/)\n\n## 致谢\n\n- https://github.com/c0ny1\n- https://github.com/whwlsfb\n- https://github.com/feihong-cs/memShell\n- https://github.com/su18/MemoryShell\n- https://github.com/BeichenDream/GodzillaMemoryShellProject\n\n## 协议\n\n- MIT","funding_links":[],"categories":["Java","webshell_shellcode","Web安全"],"sub_categories":["资源传输下载"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpen4uin%2Fjava-memshell-generator","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpen4uin%2Fjava-memshell-generator","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpen4uin%2Fjava-memshell-generator/lists"}